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CONFIDENTIAL 

I 

DIRECTOR OF CENjTRAL INTELLIGENCE 

Security Committee 






SEC0M-D-072 
28 March 1983 


MEMORANDUM FOR: Director, Intelligence Community Staff 


FROM: 


Chai rman 


25X1 


SUBJECT: 


Computer Security Work Statement and Management Plan 


25X1 


25X1 


1. Your 23 March note and the attachments to it provided me new insights 
on the computer security issue. T he following is based on those insights and 
upon my 25 March conversation with 

2. The plan is ambitious, but if it delivers it should clear the way for 

meaningful policy on computer security. Therefore, I will instruct the Chair- 
man, Computer Security Subcommittee, to place on the back burner further 
efforts to revise DCID 1/16. pending tlje outcome of | [ efforts. I 

agreed with that it would be helpful to have | the DIA 
officer who c hairs our Computer Security Subcommittee, participate in the | 

1 J» and reques ted that the SECOM staff be kept appropriately 
informed of j progress. I hope the ) p roject will be successful 

in determining what needs to be done to implement a meaningful, effective; 
computer security program in the Intelligence Community. Among the things 
that must be sorted out are the roles of the .various disciplines involved} — 
emanations and cryptographic security ((TEMPEST and COMSEC), and the procedural 
and information control aspects (e.g., (Third Agency Rule, ORCON) heretofore 
under the DCI's authority for intelligence information. It would be helpful 
if broad information-handling issues winch transcend automated systems could 
be addressed at an early stage of the study so as to clarify the nature of the 
model system to be prote cted by the recommended policy. The only serious.' 
concern I have about the H blueprint is the possible erosion of DCI 
authority that might result from entering into an agreement with DoD and 
becoming one among many participants in making policy for protecting sensitive 
intelligence in the automated mode. [ 

3. My acceptance of the services of until November 

1983 was predicated upon his potential as a computer expert to assist with' 
the revision of DCID 1/16. W ith that e ffort now in drydock, I find there j 
is no significant mission for ) in the SECOM Staff. His computer } 

expertise far overshadows his security capabilities, and I cannot consider! 
him an a ppropriate re presentative o f the Secur ity Committee to other acti -| 
vities. I advises me that is a major part of the 2.5 -j 

man-years of support he has promised] _T Therefore,! soon 


• CL BY SIGNER 

‘ DECL OADR 
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will not be available to perform any functions f or SFCOM 
SECOM does not have appropriate office space for 
inconvenience that becomes illogical under current 

respectfully suggest, therefore, that ) r ,^ rw . mj 

assigned to the Policy & Planning Staff or to the Information~Handl ing 
Committee, whic h also has drafted a plan calling for support from Mr. 


logi stically, 
an 

circumstances. I 
would more properly be 


4. Finally, I would like to offer whatever assistance the Security 
Committee, its subcommittees and the staff mav be ahle t.n nrrwiHp to the 
success of 
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